Viewing Issue Simple Details Jump to Notes ] << ] >> ] View Advanced ] Issue History ] Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0000027 [3. XAMPP for MacOS X] MySQL major always 2007-03-12 07:31 2007-05-30 09:18
Reporter tgrund View Status public  
Assigned To kmarcroft
Priority normal Resolution fixed  
Status closed   Product Version 0.6.1
Summary 0000027: User privileges get lost by upgrade from 0.6a to 0.6.1
Description After installing the upgrade from 0.6a to 0.6.1 the user table of the mysql database was damaged. The users still existed but they had no more flags of the priveleges and the password of the root user has changed.
Additional Information
Tags No tags attached.
Processor (Mac) Intel
Attached Files

- Relationships
has duplicate 0000029closed MySQL does not upgrade; security command does not alter config file 

-  Notes
(0000045)
mistermartin75 (reporter)
2007-03-14 11:28

Consider this a blocker, you have to manually alter the root password in the phpMyAdmin config file.
(0000046)
kmarcroft (reporter)
2007-03-14 13:32

Hi,

thanks for reporting.
Do I understand you right, that the MySQL privileges tables are actually not overwritten, only phpMyAdmin configuration is overwritten?

(0000047)
mistermartin75 (reporter)
2007-03-15 06:26
edited on: 2007-03-15 06:28

Only the MySQL database is overwritten (all other databases stay the way they were), hence making it unsecure again for '.../mampp security'. Once you issue the security command, it does set a root password in the MySQL database, but does not in the phpMyAdmin config file.

Actually, these are two bugs in one:

1. MySQL user table is reset (or the whole database) making it unable to access at first (you have to create all user account you had again), which also means no root password is set anymore and you have to issue mampp security again
2. When issueing mampp security, it does change the root password for MySQL, but does not set that root password in the phpMyAdmin config file

(0000048)
kmarcroft (reporter)
2007-03-15 09:12

Hi,

only 1.) is actually an issue. I guess I know what happened. I'll try and fix this issue for the next version.

2.) This is normal behaviour. We will not change this, as it is a security issue.
People should learn, that MySQL and phpMyAdmin are two different programms that need securing seperatly. Changeing the MySQL root Password on any other installation also does not change the password in the phpMyAdmin config file.
(0000074)
kmarcroft (reporter)
2007-05-28 16:28

Hi,

this issue should be fixed in the nextupgrade package.

Regards,

- Issue History
Date Modified Username Field Change
2007-03-12 07:31 tgrund New Issue
2007-03-12 07:31 tgrund Processor (Mac) => Intel
2007-03-14 11:27 mistermartin75 Issue Monitored: mistermartin75
2007-03-14 11:28 mistermartin75 Note Added: 0000045
2007-03-14 13:30 kmarcroft Relationship added has duplicate 0000029
2007-03-14 13:31 kmarcroft Status new => assigned
2007-03-14 13:31 kmarcroft Assigned To => kmarcroft
2007-03-14 13:32 kmarcroft Note Added: 0000046
2007-03-14 13:32 kmarcroft Status assigned => feedback
2007-03-15 06:26 mistermartin75 Note Added: 0000047
2007-03-15 06:28 mistermartin75 Note Edited: 0000047
2007-03-15 09:12 kmarcroft Note Added: 0000048
2007-05-28 16:28 kmarcroft Status feedback => resolved
2007-05-28 16:28 kmarcroft Fixed in Version => 0.6.2
2007-05-28 16:28 kmarcroft Resolution open => fixed
2007-05-28 16:28 kmarcroft Note Added: 0000074
2007-05-30 09:18 kmarcroft Status resolved => closed


Mantis 1.1.6[^]
Copyright © 2000 - 2008 Mantis Group
Powered by Mantis Bugtracker